Cisco Wireless LAN Controller IGMPv3远程拒绝服务漏洞

Bugtraq ID:65980 CVE ID:CVE-2014-0704 Cisco Wireless LAN Controller负责全系统的无线LAN功能，例如安全策略、入侵保护、RF管理，服务质量和移动性。 Cisco Wireless LAN Controller IGMP处理子系统存在安全漏洞，由于不正确校验特制IGMP消息类型中的特定字段，攻击者可向网络注入恶意IGMPv3消息至WLC监听的网络，IGMP子系统在处理消息时可触发内存越界读，可使设备重载，造成拒绝服务攻击。 0 Cisco Wireless LAN Controller 4.x Cisco Wireless...

CVE-2014-0704

CVE-2014-0704 affects Cisco Wireless LAN Controller (WLC) IGMP handling. When IGMPv3 Snooping is enabled, a crafted field in an IGMPv3 message can trigger a memory over-read in the IGMP subsystem, causing a DoS via device restart. Affected releases include WLC 4.x, 5.x, 6.x, 7.0 before 7.0.250.0,...